In the past, filtering published Apps visibility on Citrix DaaS with Entra ID groups was only possible when linked to application groups. Now, you can add the filter on the published app, directly. But watch out regarding a minimum VDA version. https://www.julianjakob.com/citrix-daas-filtering-published-apps-with-entra-id-groups/